Bug#273433: [Logcheck-devel] Bug#273433: logcheck: odd behaviour with perdition rules

[Jamie L. Penman-Smithson]

On Mon, 2004-09-27 at 01:51 +0200, maks attems wrote:
> try:
>  
>  ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ perdition\[[0-9]+\]: Connect:
>  [0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}-
> [0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}$
> 
> without any space at the end.

Unfortunately, this doesn't work. It appears that perdition adds a space
to the end of Connect log messages.

> yeah that's not documented, it stripes from logfile away before
> processing them through egrep.

Thanks,

-- 
-jamie <jamie at silverdream.org> | spamtrap: spam at silverdream.org
 w: http://www.silverdream.org | p: sms at silverdream.org
 pgp key @ http://silverdream.org/~jps/pub.key
 00:30:01 up 2 days,  4:19, 15 users,  load average: 0.05, 0.14, 0.24

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/logcheck-devel/attachments/20040927/f578e4df/attachment.pgp